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(57)Abstract: 

PROBLEM TO BE SOLVED: To provide an illegal access 
detection system capable of detecting illegal accesses 
of various patterns including an unknown method. 
SOLUTION: The latest access policy of a site to be a 
management object is acquired from a management 
server 20 and held. Packets addressed to the site are 
acquired among packets circulated in a network, and 
packets suitable for the access policy and packets 
unsuitable for the access policy are sorted amount the 
acquired packets. When a packet unsuitable for the 
policy is selected, the packet is specified as a packet 
having possibility of being an illegal access and notified 
to the management server 20 in order to change an 
access condition for removing an access based on the 
specified packet. 
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